Brian Robinson reports in Government Health IT: The Health and Human Services Department has begun overhauling the privacy and security rules that govern personal health information, which is considered vital to attempts by Congress and the Obama administration to broaden the adoption of electronic health records. HHS published guidance on April 17 that outlines the…
Category: Breach Laws
Data Breach Notification Law Across the World from California to Australia
Alana Maurushat of University of New South Wales has published a review and comparison that is available online at bepress.com in pdf format. The abstract: Data breach notification and disclosure laws are emerging around the globe. The following article and table examine the specifics of data breach notification frameworks in multiple jurisdictions. Over the year…
FTC Publishes Proposed Breach Notification Rule for Electronic Health Information
From the FTC: The Federal Trade Commission today announced that it has approved a Federal Register notice seeking public comment on a proposed rule that would require entities to notify consumers when the security of their electronic health information is breached. The American Recovery and Reinvestment Act of 2009 (the Recovery Act) includes provisions to…
AL: Retailers: Proposed bill creates problems for business owners
Trevor Stokes reports: Credit unions and retailers reacted differently Wednesday to two proposed Alabama bills that would require businesses to notify residents when personal information accessible by computer has been breached. The companion bills, introduced this week by Rep. Tammy Irons, D-Florence, and Sen. Roger Bedford, D-Russellville, are aimed to protect consumers against personal data…
Bill: Missouri businesses must disclose security breaches
Missouri businesses would be required to notify consumers when their personal or financial information is compromised in security breaches, under a bill that received initial approval Wednesday from the Missouri Senate. Sen. Scott Rupp, R-Wentzville, sponsored Senate Bill 207 as a way to inform consumers of security breaches that could result in identity theft or…
Pointer: State Laws Require Secure Personal Data
Nick Akerman and Melissa J. Krasnow have an article in The National Law Journal: Connecticut, Massachusetts and Nevada recently enacted laws requiring businesses to institute certain compliance measures to secure personal information that can be used to perpetrate identity theft. The Massachusetts law applies to a business located anywhere in the United States that stores…